added proper responses and CORS